CVE-2018-7240

A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to load a malicious firmware.

• CWE-787

• http://www.securityfocus.com/bid/103541Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01Third Party Advisory, US Government Resource
• https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/Vendor Advisory
• http://www.securityfocus.com/bid/103541Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-086-01Third Party Advisory, US Government Resource
• https://www.schneider-electric.com/en/download/document/SEVD-2018-081-01/Vendor Advisory

Published

Apr 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7234A vulnerability exists in Schneider Electric's Pelco Sarix P…7.5
• CVE-2018-7235A vulnerability exists in Schneider Electric's Pelco Sarix P…7.5
• CVE-2018-7236A vulnerability exists in Schneider Electric's Pelco Sarix P…8.1
• CVE-2018-7237A vulnerability exists in Schneider Electric's Pelco Sarix P…9.1
• CVE-2018-7238A buffer overflow vulnerability exist in the web-based GUI o…9.8
• CVE-2018-7239A DLL hijacking vulnerability exists in Schneider Electric's…
• CVE-2018-7241Hard coded accounts exist in Schneider Electric's Modicon Pr…
• CVE-2018-7242Vulnerable hash algorithms exists in Schneider Electric's Mo…
• CVE-2018-7243An authorization bypass vulnerability exists In Schneider El…
• CVE-2018-7244An information disclosure vulnerability exists In Schneider …
• CVE-2018-7245An improper authorization vulnerability exists In Schneider …
• CVE-2018-7246A cleartext transmission of sensitive information vulnerabil…